Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/09ecf35d-8e07-45e8-a7f2-459595ce30d3.roa
File:                     09ecf35d-8e07-45e8-a7f2-459595ce30d3.roa (raw, json)
Hash identifier:          9Ef6q0L+Yv8dirJ9DFPo6wMEAbKhgX3L1tyWt6pBSd4=
Subject key identifier:   81:89:89:1E:D2:87:76:38:76:5B:0B:3E:69:F4:B1:5D:99:40:3C:DF
Certificate issuer:       /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial:       477AD4BC4ACD77C1D42A8D64C7F91D12C147011A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/09ecf35d-8e07-45e8-a7f2-459595ce30d3.roa
Signing time:             Mon 06 Jan 2025 00:00:00 +0000
ROA not before:           Mon 06 Jan 2025 00:00:00 +0000
ROA not after:            Mon 10 Feb 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:f0f0:553a::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 06 Jan 2025 23:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7a:d4:bc:4a:cd:77:c1:d4:2a:8d:64:c7:f9:1d:12:c1:47:01:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
        Validity
            Not Before: Jan  6 00:00:00 2025 GMT
            Not After : Feb 10 23:59:59 2025 GMT
        Subject: serialNumber=d4f346b35cbbca4b519cf71843308803ffdcd1d8156c58b332f031cb02aae2be, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:52:19:ed:c4:fc:69:bd:3c:9a:23:03:f6:88:
                    22:75:e9:f7:bf:39:a6:46:5f:b1:1a:9b:c2:64:ec:
                    e6:b4:11:b1:17:44:7b:93:7f:bc:ca:d4:a0:aa:3f:
                    a7:b2:ce:ea:3d:08:62:48:23:5d:a5:2d:58:5b:a3:
                    49:15:2a:82:ed:e3:4c:f4:8d:be:8f:a6:14:e1:fb:
                    44:9a:44:3c:ff:3c:56:a0:d7:5a:1b:0c:35:3d:3a:
                    e7:ca:88:ac:d8:2a:4c:ce:57:d8:00:13:70:e9:48:
                    ad:5d:76:e2:7e:d8:99:83:55:a4:d7:01:17:4d:6a:
                    1b:cb:e8:61:6c:5f:0e:12:97:80:06:1b:00:96:28:
                    81:31:32:7f:9f:ac:a3:80:78:08:2b:9c:6a:66:32:
                    80:f7:17:fd:45:65:0e:50:64:96:35:28:aa:87:fd:
                    48:e3:9d:67:0b:50:06:64:69:da:05:36:c0:b0:fc:
                    16:c6:48:04:f5:48:14:f8:6a:e3:19:08:26:ef:72:
                    4d:0c:ef:fa:dd:f9:82:93:b6:65:80:46:cc:95:ba:
                    9d:7c:fb:9c:13:3c:01:99:09:e0:4c:54:ff:64:dc:
                    a1:9c:ea:43:33:b0:a7:20:05:16:fe:5f:fe:4e:4e:
                    3d:49:60:41:bd:9a:60:44:f1:6f:06:1d:53:ed:d3:
                    46:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:89:89:1E:D2:87:76:38:76:5B:0B:3E:69:F4:B1:5D:99:40:3C:DF
            X509v3 Authority Key Identifier:
                keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/09ecf35d-8e07-45e8-a7f2-459595ce30d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:f0f0:553a::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:f7:85:1a:f0:37:58:45:7f:48:95:56:0d:fc:b1:4f:b6:
         36:01:2b:57:0b:11:64:3e:70:b8:23:6b:be:03:a4:9f:26:2b:
         ad:dc:0e:fa:10:54:bc:2b:37:4a:53:3b:3a:a1:7d:75:4f:cf:
         90:2d:74:99:5b:ed:ae:24:53:16:84:a7:fc:77:79:76:56:8f:
         73:c9:d1:4f:a5:d3:86:5c:0d:8d:91:bb:6c:f2:ca:82:7a:71:
         3b:be:cc:b4:57:55:82:d4:04:ec:96:e5:66:d0:55:8b:af:17:
         13:2a:ff:ed:12:4b:ea:95:96:22:e3:64:e0:74:d5:61:f5:ca:
         b9:b2:81:14:21:4c:ce:b6:b1:13:29:96:1b:eb:23:fe:33:1e:
         37:1f:ce:a9:f0:41:66:99:65:78:98:20:f1:48:31:14:d5:9b:
         be:82:2c:3f:6a:9b:a4:55:db:de:4a:10:77:3f:cf:f0:ad:93:
         05:7b:25:87:ca:dd:fa:f2:cb:9f:06:0a:7f:11:78:7c:fd:1c:
         06:20:5f:a2:9b:77:47:d9:b5:28:d1:2f:f4:16:65:08:5e:f4:
         72:7c:6e:ed:4c:73:45:2a:3e:3a:63:a2:92:05:7e:5e:fd:65:
         a3:86:ed:df:1b:88:6c:c4:5c:4a:3d:14:79:07:a6:b5:38:d2:
         06:4c:22:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----